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Top Stories 

• Pacific Gas and Electric Company was issued 28 new charges July 29 and face proposed 
fines exceeding $3 billion in connection to the 2010 San Bruno, California pipeline 
explosion that killed 8 people and caused extensive damage to a neighborhood. - 
Associated Press (See item 1) 

• Lloyds Banking Group agreed to pay $370 million in fines to U.S. and U.K. authorities to 
settle an investigation into the group’s role in manipulating the London interbank offered 
rate (LIBOR). - Reuters (See item 6) 

• A physician assistant and a certified nursing assistant both licensed in Llorida were 
convicted July 28 for participating in a Medicare fraud scheme that totaled approximately 
$200 million in fraudulent billings by American Therapeutic Corporation. - U.S 
Department of Justice (See item 18 ) 

• Six facilities on the University of California, Los Angeles campus were damaged after a 
30-inch water pipe burst July 29 spilling 8 million gallons of water onto the roadway 
causing flooding and stranding at least 5 people. - Associated Press (See item 19 ) 
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Energy Sector 



1. July 30, Associated Press - (California) PG&E charged with obstruction of justice 
over deadly 2010 gas pipeline explosion. A federal grand jury issued new charges 
against Pacific Gas and Electric Company July 29 that included an obstruction of 
justice charge and 27 others for lying to federal investigators in connection to the 2010 
San Bruno pipeline explosion that killed 8 people and caused extensive damage to a 
neighborhood. The company faces more than $3 billion in total fines. 

Source: http://www.foxnews.com/us/2014/07/3Q/pge-charged-with-obstruction-iustice- 
over-deadly-20 10-gas-pipeline-explosion/ 

For another story, see item 7 
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Chemical Industry Sector 

See item 11 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. July 30, U.S. Consumer Product Safety Commission - (National) Kawasaki recalls 
Teryx4 recreational off-highway vehicles due to injury hazard. Kawasaki 
announced a recall for around 11,000 model year 2012 and 2013 Teryx4 750 4x4 
recreational off-highway vehicles due to the vehicles’ floorboards potentially allowing 
debris to break through into the foot rest area, posing a hazard to the vehicle operator 
and front passenger. 

Source: http://www.cpsc.gov/en/Recalls/Recall-Alerts/2014/Kawasaki-Recalls-Teryx4- 
Recreational-Qff-highway- Vehicles/ 

[ Return to top ] 



Defense Industrial Base Sector 

3. July 29, Defense News - (National) Some F-35 flight restrictions lifted. U.S. 

Department of Defense officials reported July 29 that some flight restrictions on the F- 
35 Joint Strike Fighter fleet were lifted during the week of July 21, including speed 
restrictions that were relaxed from Mach 0.9 to Mach 1.6 and maneuverability 
restrictions that increased from 3Gs to 3.2 Gs. Authorities continue to inspect the fleet 
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and impose certain restrictions that were implemented after a June 23 fire that damaged 
an F-35A aircraft and led to a grounding of the fleet that lasted until July 15. 

Source: http://www.defensenews.com/article/20140729/DEFREG02/307290036/Some- 
F-35-Flight-Restrictions-Lifted 
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Financial Services Sector 

4. July 29, KXAN 36 Austin - (Texas) Credit card skimming ring stretched from 
Sunset Valley to Round Rock. Police in Travis County arrested a woman July 25 on 
fraud charges for allegedly using a payment card skimmer to collect customers’ card 
data from the Chipotle restaurant where she worked in Sunset Valley. A skimmer found 
in her possession contained 527 card numbers and police alleged that she was selling 
the numbers to a man arrested in April on similar charges. 

Source: http://kxan.com/2014/07/29/crcdit-card-skimming-ring-strctchcd-from-sunsct- 
valley-to-round-rock/ 

5. July 29, WCBS 2 New York City - (New York) Customs agents seize more than 
$200k in counterfeit cash at JFK. Customs and Border Protection agents at a John F. 
Kennedy International Airport cargo facility in New York City reported that they 
seized over 2,000 counterfeit $100 bills July 15-16 that were hidden in two shipments. 
Source: http://newvork.cbslocal.com/2014/07/29/customs-agents-seize-more-than- 
200k-in-counterfeit-cash-at-ifk/ 

6. July 28, Reuters - (International) Lloyds Banking Group to pay $370 million Libor 
rigging fines. British financial institution Lloyds Banking Group agreed to pay $370 
million in fines to U.S. and U.K. authorities to settle an investigation into the group’s 
role in manipulating the London interbank offered rate (LIBOR). 

Source: http://www.cnbc.com/id/101860773 

[ Return to top ] 

Transportation Systems Sector 

7. July 30, Associated Press; Arkansas Democrat-Gazette - (Arkansas; Texas) 

ExxonMobil restarts Pegasus pipeline closed after Mayflower oil spill; operating 
in Texas. ExxonMobil reported July 30 that it restarted its Pegasus pipeline in Little 
Rock after shutting it down in 2013 due to a crude oil spill in Mayflower. The company 
stated that southern portions of the pipeline in Texas restarted July 9 after extensive 
safety and operational testing. 

Source: 

http://www.tribtown.com/view/storv/a069al734f0e4dbdbl58aaa38111ald2/AR— Oil- 
Spill-Arkansas 

8. July 30, WCTV 6 Thomasville - (Florida) Victims identified in deadly 1-10 accident. 
Three people were killed and one person was injured when a vehicle traveling 
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eastbound on Interstate 10 near Tallahassee collided with another vehicle, crossed over 
the median, and struck a semi-truck July 29 prompting the closure of westbound lanes 
several hours. 

Source: http://www.wctv.tv/home/headlines/I-10-Accident-269098211.html 

9. July 30, KPHO 5 Phoenix - (Arizona) Impairment suspected in injury crash that 
closed 1-17. Two people were injured while northbound lanes of Interstate 17 and three 
ramps in Phoenix were closed for approximately 5 hours July 30 after a suspected 
impaired driver struck a stalled vehicle on the shoulder lane pushing both vehicles onto 
the interstate. 

Source: http://www.kpho.com/storv/26149071/impaired-driver-suspected-in-iniurv- 
crash-that-closes-i-17 

10. July 30, WABC 7 New York City - (New Jersey) Terminal building at Port Elizabeth 
back open after gas leak; evacuation. The Maher Container Terminal Building at Port 
Elizabeth in New Jersey reopened July 30 after closing for 15 hours due to a gas leak 
triggered by a water main break. 

Source: http://7online.com/news/terminal-building-at-port-elizabeth-back-open-after- 
gas-leak-/226659/ 

11. July 30, KSLA 12 Shreveport - (Louisiana) US 79 remains closed following hazmat 
tanker truck wreck in Caddo Parish. U.S. Route 79 in Caddo Parish remained closed 
July 30 after a semi-truck carrying 4,150 gallons of aluminum sulfate water treated 
with anhydrous ammonia overturned and spilled all over the road and in nearby ditches 
when the driver ran off the road and crashed into a tree July 29. 

Source: http://www.ksla.com/storv/26139518/us-79-remains-closed-following-hazmat- 
tanker-truck-wreck-in-caddo-parish 

12. July 29, WTVD 11 Durham - (North Carolina) 2 freight train cars derail near 
Morrisville, Amtrak service affected. Amtrak service was halted for 3 hours July 29 
after two Norfolk Southern train cars derailed spilling rocks over the tracks in 
Morrisville near the Wake-Durham County line. 

Source: http://abcll.com/news/amtrak-service-impacted-by-freight-train-issue-in- 
morrisville/227054/ 

13. July 29, WTAQ 1360 AM/97.5 FM Green Bay - (Wisconsin) State officials close Lake 
Mills rest area due to contaminated water. Wisconsin officials announced that the 
State rest area on Interstate 94 in Lake Mills was closed indefinitely after routine 
testing found the water was contaminated with fecal coliform bacteria. Repairs to the 
public water system that serves the facility began July 28. 

Source: http://wtaq.com/news/articles/2014/iul/29/state-officials-close-lake-mills-rest- 
area-due-to-contaminated-water/ 



Lor additional stories, see items 5 and 21 
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Food and Agriculture Sector 



14. July 29, KXMB 12 Bismarck - (North Dakota) Farmer dies in grain bin accident. A 
worker that was loosening grain inside a grain bin died when he became partially 
buried in the elevator on a farm in Napoleon, North Dakota, July 26. 

Source: http://www.kxnet.com/story/26141958/farmer-dies-in-grain-bin-accident 

15. July 29, U.S. Food and Drug Administration - (Oregon; Washington; California) 
Hummingbird Wholesale recalls Organic Raw Carob Powder for possible 
Salmonella contamination. The U.S. Food and Drug Administration announced July 
29 that Hummingbird Wholesale recalled its Organic Raw Carob Powder due to 
possible human health risks. The recall was initiated after a supplier for the product 
notified the company that carob powder used during the manufacturing process may be 
contaminated with Salmonella. 

Source: http://www.fda.gov/Safety/Recalls/ucm407221.htm 
For another story, see item 31 
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Water and Wastewater Systems Sector 

16. July 29, WTVB 1590 AM Coldwater - (Michigan) Water advisory in Coldwater lifted 
after wastewater spill into Sauk River last week. A boil water advisory was lifted in 
the area between the Coldwater Board of Public Utilities wastewater treatment facility 
and the Rotary Park public access July 28 after tests results showed fecal coliform 
levels were normal. A power outage at the wastewater treatment facility the week of 
July 21 caused untreated sewage water to flow into the Sauk River prompting the 
advisory. 

Source: http://wtvbam.com/news/articles/2014/iul/29/water-advisory-in-coldwater- 
lifted-after-wastewater-spill-into-sauk-river-last-week/ 

For additional stories, see items 13 and 19 
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Healthcare and Public Health Sector 

17. July 29, Newport News Daily Press - (Virginia) Riverside announces security 
breach. Riverside Health System in Newport News notified over 2,000 patients after 
an employee was charged in connection to a security breach at the health system’s 
Cancer Specialists of Tidewater office. Investigators believe the former employee 
accessed the patients’ records without authorization. 

Source: http://www.dailypress.com/health/dp-nws-security-breach-riverside- 
20140729,0,1 160235-story 



-5 - 



18. July 28, U.S. Department of Justice - (Florida) Physician assistant and certified 



nursing assistant convicted in $200 million Medicare fraud scheme. A physician 
assistant and a certified nursing assistant both licensed in Florida were convicted by a 
federal jury July 28 for participating in a Medicare fraud scheme that totaled 
approximately $200 million in fraudulent billings by American Therapeutic 
Corporation (ATC). The two individuals, along with co-conspirators took part in the 
scheme that stretched across seven ATC locations by submitting false claims to 
Medicare seeking reimbursement for mental health services that were not provided or 
were provided to ineligible patients. 

Source: http://www.iustice.gov/opa/pr/2014/July/14-crm-791.html 
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Government Facilities Sector 

19. July 30, Associated Press - (California) UCLA wades through damages from pipe 
flooding. Six facilities on the University of California, Los Angeles campus were 
damaged after a 30-inch water pipe burst July 29 spilling 8 million gallons of water 
onto the roadway causing flooding and stranding at least 5 people. Utility crews 
reported July 30 that repairing the pipe could take several days. 

Source: http://news.msn.com/us/broken-water-main-floods-ucla-5-people-rescued 

20. July 30, Fresno Bee - (California) Residents who fought ‘ripping’ El Portal fire 
share concerns. Crews reached 34 percent containment July 29 of the 3,545-acre El 
Portal Fire burning near Yosemite National Park. Several homes remained evacuated in 
Foresta. 

Source: http://www.fresnobee.com/2014/07/29/4Q46578/it-was-iust-nuts-residents- 
who.html 

21. July 30, KBOI 670 AM Boise - (Idaho) Boise National Forest fires contained, most 
evacuations lifted. Fire crews reached full containment July 28 of the Whiskey 
Complex and Mack fires in the Boise National Forest which combined, burned over 
9,000 acres. Forest Road 395 remained closed and nearly all evacuation orders were 
lifted. 

Source: 

http://www.670kboi.com/common/more.php?m=58&ts=1406605808&article=F3093D 
73 169C1 1E4B5 lEFEFDADE6840A&mode=2 

[ Return to top ] 

Emergency Services Sector 

22. July 29, Buffalo News - (New York) Le Roy Fire Department treasurer arrested, 
charged with stealing nearly $50,000. Authorities arrested the treasurer of the Fe Roy 
Fire Department in Genesee County July 29 and charged him with stealing nearly 
$50,000 from the department for personal use. An audit found that he forged signatures 
and made unauthorized transfers, withdrawals, and deposits from the department’s 
account, as well as from the firemen’s benevolent association. 



- 6 - 



Source: http://www.buffalonews.com/citv-region/genesee-county/le-rov-fire- 
department-treasurer-arrested-charged-with-stealing-nearly-50000-20140729 



For another story, see item 30 
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Information Technology Sector 

23. July 30, Softpedia - (International) Malicious Android apps can impersonate 
trusted ones. Researchers at Bluebox Security reported a vulnerability present in 
Android versions below 4.4 (KitKat) can allow malicious apps to benefit from the 
access permissions of legitimate apps due to signatures issued from a legitimate app 
not being checked. 

Source: http://news.softpedia.com/news/Malicious-Android-Apps-Can-Impersonate- 
Trusted-Ones-452659.shtml 

24. July 30, Securityweek - (International) Tor warns of attack attempting to 
deanonymize users. The Tor Project reported that an attack that could have broken 
users’ anonymity on the Tor network was detected July 4 and may have been part of a 
research project. The attack used a combination of a Sybil attack and a traffic 
confirmation attack, and the vulnerabilities exploited were closed in a patch issued July 
30. 

Source: http://www.securitvweek.com/tor-wams-attack-attempting-deanonvmize-users 

25. July 30, IDG News Service - (International) Zero-day flaws found in Symantec’s 
Endpoint Protection. Offensive Security researchers reported finding three zero day 
vulnerabilities in Symantec’s Endpoint Protection product that could allow a logged-in 
user to gain system access and perform attacks such as identifying domain 
administrator cache credentials or hash dumping. 

Source: 

http://www.computerwoiid.eom/s/article/9250047/Zero day flaws found in Symante 
c s Endpoint Protection 

26. July 30, Threatpost - (International) Trio of flaws fixed in Facebook Android app. 
Facebook issued an update for its Android app that closes a vulnerability where an 
HTTP server used for video playback would accept requests from any client, leading to 
the potential for attacks to cause a denial of service (DoS) condition or transfer large 
amounts of data to ran up charges on a victim’s mobile bill. 

Source: http://threatpost.com/trio-of-flaws-fixed-in-facebook-android-app 

27. July 29, Securityweek - (International) Many antivirus engines plagued by 
vulnerabilities: Researcher. A researcher with Coseinc presenting at the SyScan 360 
conference reported that 14 of 17 antivirus products tested contained at least one 
vulnerability due to a variety of factors. Some vulnerabilities have since been patched, 
while the researcher reported that others remain exploitable. 

Source: http://www.securityweek.com/manv-antivirus-engines-plagued-vulnerabilities- 
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researcher 



28. July 29, Securityweek - (International) 70 percent of IoT devices vulnerable to 
cyberattacks: HP. HP released a report on Internet of Things (IoT) devices and found 
that 70 percent of devices tested contained serious vulnerabilities, while 80 percent 
raised privacy concerns, among other findings. 

Source: http://www.securitvweek.com/70-iot-devices-vulnerable-cvberattacks-hp 

29. July 29, Softpedia - (International) Instagram account hijack code published. A 
developer released a proof-of-concept that exploits the lack of HTTPS encryption in 
certain functions of the Instagram app for iOS that could allow an attacker on the same 
network to intercept session cookies and use them to take over Instagram accounts. 
Instagram parent company Facebook stated that they are aware of the issue and are 
working to find a solution. 

Source: http://news.softpedia.com/news/Instagram-Account-Hiiack-Code- 
Published-452658.shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

30. July 29, KERO 23 Bakersfield- (California) Phone service outage in west Kern 
County. A damaged cable knocked out Verizon landline phone and 9-1-1 services in 
Taft, McFarland, and Glenville in west Kern County July 29. Crews worked to repair 
the cut cable. 

Source: http://www.turnto23.com/news/local-news/phone-service-outage-in-west-kern- 
county-072914 

31. July 29, Stroudsburg Pocono Record - (Pennsylvania) Crews work to restore 
Internet, cable after fire at Luna Rossa Cafe. Crews worked to repair by July 30 a 
damaged fiber optic cable in Gilbert after Internet service for PennTeleData customers 
and phone and cable service to Blue Ridge Cable and Palmerton Telephone customers 
was knocked out when a fire broke out at the Luna Rossa Cafe July 27 damaging the 
cable. 

Source: 

http://www.poconorecord.com/apps/pbcs.dll/article?AID=/20140729/NEWS/14072981 
0/- 1/news 

32. July 29, Charleston Post and Courier - (South Carolina) Comcast restores service in 
Charleston County. Internet, phone, and cable services were restored for Comcast 
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customers in parts of Charleston County, South Carolina, after a 6-hour outage July 28 
due to a severed cable caused by a tree-trimming crew. 

Source: 

http://www.postandcourier.com/article/20140729/PC05/140729296/1177/comcast- 

restores-service-in-charleston-county 
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Commercial Facilities Sector 

33. July 30, Chicago Tribune - (Illinois) Chicago Home Depot cited for OSHA 
violations. The Occupational Safety and Health Administration cited a Chicago Home 
Depot store for six safety violations, including worker exposure to chemical burns and 
the lack of training and maintenance for industrial vehicles. Proposed penalties total 
$110,700. 

Source: http://www.chicagotribune.com/business/breaking/chi-home-depot-osha- 
violations-20 1 407 30,0,4925604. story 

34. July 29, WTMJ 4 Milwaukee - (Wisconsin) Scam may be to blame for glut of recent 
bomb threats. The FBI is investigating after at least 10 businesses in 7 cities across 
Wisconsin received bomb threats since July 25, prompting several stores to evacuate. 
Authorities reported similarities in several cases and stated that a suspect allegedly calls 
the store and claims he is going to blow up the building unless an employee loads 
money onto a Green Dot prepaid debit card. 

Source: http://www.irn.com/tmi4/news/Scam-mav-be-to-blame-for-glut-of-recent- 
bomb-threats-269 128781 .html 

35. July 29, KTLA 5 Los Angeles - (California) All clear declared after suspicious 
package prompts Mother’s Beach, hotel evacuation in Marina del Rey. Police 
responded July 29 to reports of a suspicious package found near the swimming pool 
area of the Jamaica Bay Inn in Marina del Ray, prompting an evacuation of the hotel 
and the nearby area of Mother’s Beach. The scene was cleared about 2 hours later after 
police determined the package did not contain an explosive device. 

Source: http://ktla.com/2014/07/29/all-clear-declared-after-suspicious-package- 
prompts-mothers-beach-hotel-evacuation-in-marina-del-rey/ 

[ Return to top ] 



Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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